stick tables and url_param + post headers - counter‏

2015-10-25 Thread Roland RoLaNd
Hello, I am trying to rate limit requests depending on their specific identifier which is sent either as a post header or a query string parameter. Below is my starting config (am i mistaken to be using this ? ) stick-table type string len 70 size 5M expire 1m store

RE: rate limiting according to "total time" - possible ?

2015-09-14 Thread Roland RoLaNd
That's exactly what i wanted!! thank you willy > Date: Mon, 14 Sep 2015 07:38:08 +0200 > From: w...@1wt.eu > To: r_o_l_a_...@hotmail.com > CC: haproxy@formilux.org > Subject: Re: rate limiting according to "total time" - possible ? > > Hi Roland, > > On

rate limiting according to "total time" - possible ?

2015-09-11 Thread Roland RoLaNd
hello i have haproxy directing traffic to a number of backends. these backends can auto scale upon traffic; my goal is to change "maxcon" depending on "total time" or "backend time" that a request took to complete. for example: if totaltime < 1 second ; maxcon = 1000if totaltime < 2 second:

Change route on http_err_cnt

2015-05-27 Thread Roland RoLaNd
Stick table /request tracking inquiry: is it possible to traffic to a different backend when http error (5xx/4xx) goes higher than a certain threshold ? my config is as such: acl phoenix_bound path_beg -i -f /etc/haproxy/phoenix_bound.lst use_backend phoenix if phoenix_bound

stick-table and conn_rate question

2015-05-27 Thread Roland RoLaNd
managed to successfully reject access from specific users depending on condition; but what i eventually want is to provide them with a certain page instead of reject (redirect isn't an option) backend phoenix stick-table type string len 40 size 5M expire 2m store conn_rate(60s)tcp-request

frequent NOSRV/SC log hits behind AWS ELB

2015-03-10 Thread Roland RoLaNd
Hello, i am running haproxy version: 1.5.11 on EC2 instances behind an AWS load balancer lately i am noticing a lot of 503 forbidden logs with SC as termination state due to nosrv error my backend servers(which are behind an ELB of their own) are all healthy and responsive moreover i set a loop

SSL offloading with NTLM auth

2013-01-31 Thread Roland
- with no success at all. If I bypass HAProxy or change HAProxy config to mode tcp everything is fine. Have anyone had this kind of problem already? Or maybe some similar? Best regards, Roland

Re: SSL offloading with NTLM auth

2013-01-31 Thread Roland
- maybe the connection is forcably closed on some side. Cheers, Roland On Thu, 31 Jan 2013, Baptiste wrote: Hi, 401 is absolutely normal in NTLM. There are 2 or 3 request/response before the user is really authenticated when using NTLM. When HAProxy load-balances NTLM based services, the only log

Re: Load balancing PostFix Mail Out

2009-12-03 Thread Paul Roland
Sorry for offending you with the following question but that is quite a lot pf emails... Do you do spam? On Thu, December 3, 2009 07:09, boris17...@gmail.com wrote: We are handle arround 500'000 mails 3 times by week, but we have to load balance because we used dkimproxy for signing emails, and

need some help please

2009-12-01 Thread Paul Roland
Need some help with config it seems like im doing it wrong... I have: acl missing_cl hdr_cnt(Content-length) eq 0 block if HTTP_URL_STAR !METH_OPTIONS || METH_POST missing_cl block if METH_GET HTTP_CONTENT block unless METH_GET or METH_POST or METH_OPTIONS or METH_HEAD That means after reading

RE: need some help please

2009-12-01 Thread Paul Roland
nvm this, sorry. I was using tcp mode... But I have another question, can I limit connections per ip with haproxy? thx On Wed, December 2, 2009 05:29, Paul Roland wrote: Need some help with config it seems like im doing it wrong... I have: acl missing_cl hdr_cnt(Content-length) eq 0 block